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REMARKS 

Priority Claim 

voiicau quest that the Office ac the c ^ ( p ty made in he 

piel m nan i to v*n ul i ^ > o ' J ' n „ 1 o 

States of Pending Claims 

J 1. ^ s s w r ^ i j! %\ v. . 

ill'] ^ s 

Claims 1 - 53 and 60 - 66 remain pending. 

( 1 mi „^ " A i 6 * \ i i i t k i .vc^ is 

remote devices to cryptographic keys used the kej server to )ei brm • \ olographic 
operations. Support is found at least at p. 7, II. 3 - 23 of the application. 
Claims 8 arid 9 are amended to correct minor informalities, 
V w ma ha i added to " endm< 

5 r* ( .n t c,i s ©j Resj egts 

Fhe \amit> \e u. m \ \ Vrmu^m-, u < <.\ ik i on page io 

c' f <. ^si i 1 i \oi on 1 pa 3r_ e eeord doc 

i! to k ^ Klk e le ' j io i ! i _ ! > x kc\ hi 

perto '0 > 0 M" o 'vi 0 v<r < rcsgtclfuih p. at mt > Mi ' A' s u, Is 0i,j 

make that argument, it accounted lot onh about one tenth o the ipaee devoted to arguments 
j v. in toiein i xam t*t s 

h< - ( ^ \ i v - _ v be icn u gumeno In. ate i ot lose 

I hi U v ^ i. s ' j I 1 i ^ 1 Ml " " 

i c severing af e * jstrate 

Herrmann, 261 F.2d 598, 120 USPQ 182 it CPA 1958} where the applicant 
urged that the subject matter claimed produced new and useful results. The court 
i k. i' K f 3 ' i - r.\ q v 1 t c 

v i a e Board ol Appeals constrain iceept sta e 

face value and therefore found certain claims to be allowable. See also In re 
Song 54 F.3d 746, 751. 34 USPQ2d 1684, 1688 (Fed. Cir. 199.5} (Office failed 
to rcb-ut applicant's argument). 
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Accordingly, Applicants respectfully request that allowable subject matter be explicitly 
i gnk'od hi the t s whi App t i ve rg e pertain. Alternatively 
\ppHe'i-:';- resix [i> n tain all >u" tlx swero a ems po.se d c rasp., v < 
the previous Office action by reference to that respom .■ as if those arguments Here again fully set 
forth Hoc u and o.-.pccM uh> _ see a r»n« , those .yir.ei ^ se \ppa> am- cat-, consider 
and address a: easorrs th ep ed for mail ling the rejections 

N k h s i e i tot expli on the use 

ks > e^ a- , 1 - v* f ' ! p •vevbd" but contends the prior art discloses negotiating keys 
to be used a establish secure comm mication "and also for clal \ encrypti aid citing Berson, 
10:40 - 57 for support. That explanation appears to recognize the differences disclosed in the 
specification and in Berson between 1 ) establishing keys for secure communication, and 2) 

m el 1 t 1 a a if t raatl '1 

1 i d u ? *r v i ! t ^ Kite C 1 f ! s ) t 

current specification, 

t v i , a nit i h e s s c a < ta i ke\ established be e re c ient 
and server That ke^ used to se e cos ran ations netwe cli lands e su h is 3} 
establishing a secure tunnel (Berson, 10; 44 -46). Thereafter, encrypted information is received 
at the server from the client (id., 46 - 48). "A second key also can be sent to the server from the 
client," (id., 49 •••• 50). That second key is for the servej * eucryj n§ distinct 

front the operations performed in connection with the secure tunnel "Once the work [i.e., the 
rn fioaotf x. u ' h is <. i perk-.uvb. t u e die lh * -a toe o t > a ' ... o a ui o is 
v^i-i'v >. Ni e ^ \ t 

client and the <rwr Theieafter. the Litem sand.-; to the scr.er data that a : c;;c- a cp\ ptogtaphic 
■ >pei ati< m and the ke> needed to pei lbs m the ones aii< m, to ■ htload she p t « essing burden 
associated with the operation from the client to the server. The server returns to the client the 
operated -on data. 

■av.su (. i ! , sess P i *^ > v. > v a e 

provided to th ^ i ^ ^eture key provider ft the engine to use n 

cryptographic operations on data provided by the client, while preventing access to those keys by 
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em cann )es o.w^o^c oggoO < > ta ^ ^ sfi^nu caesslo 
crypto £ j oey s by a c ien 

Egq^tfst.forr^p:^ lensj • ^ ' , dnalih of the rejection of the h-^r Office action 

i s e^> < . the jeai *a < i 1 ^ v. 
recon.s erek'-t u < uak^a swck 

arguments prescntcu * o>>n to t >« v . a. \ — s < tv > ^ the *fpponunity to 
consider the > A, i ow.-ble >abu cater die tfoeJ nJ con ci an, j-o a 

u'Mm , <a a ^ v i . e s>a I , v - i i 1 e ^ v iv ! w - 

Ctoiitt Rejec tions - SS USC $102 

et ai. (U.S. patent 7,051,199). The. rejection is traversed with regard to the claims as currently 
presented. 

The claims are directed to a network attached encryption server for providing 
cryptographic services era* Sy hoste; spite on a yp i < i <. J ; 

< 1 N eass< dc g f > < 1 es < s ng the 

applications. The server can also pro\ ale such services et a pkacup of - i h remote hosts, as 
wcihiuvti i ( i thv. ^ k>i^. i v Jv. 1 b e ta_:\p ion sc a- 

Moreove the enc ;-; on serve >< > i cess > the cry] i an 1 tse to a x brn 
v. \ a v m v v-i ^ ^ a v ( s a ^ : > s c- a ? 

ersotoarapine key i , es.n \ c tcu-pka cela.eLeys^ 1 a red r ia' ire cennt} 

oh H i x ^ i v - i t i t v i v ^ Mia the 

use ol k out of n sm ai e ads to access the keys (p. ?. 11. 7 •••• 22). Accordingly, an anseeare 
condition on a host, such as a security breach by a malicious hacker or a disgruntled employee, 
e not c >roi ie security e keys 

In contras ! - 1 ^ a. eluding a » > - T > ' providing 

crypts iphi se as' clients which the clients th> cha xij > ss ^xiseii'n 
cryptographic operations. In Bersora Sv a 'first key h established, and a tunnel is generated on the 
network [between the client and the server}. Thereafter, information is received at die server 
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from the client utilizing the tunnel. Such infonnation is encrypted by the client using the first 
key." Berson. 3:6 - 9. Infonnation is then sent from the client to the serve? through the tunnel 
including keys, messages and ciphertext (id., 3:15 17) In other words, in Berson the \e> s used 
)V the serve \~ i eryptograpl >perat c idea by the c < ! <_ se (C 
heclien i v»utt. L i < v. sr^ 1 \ th i \ it nh etsv 

ernb ents 1 si ear whet k«. or cryp iphic c itions com 

from (id n ! '1 i 1 an e od it h ch "the cryplosc dy knows the chei 

private kes 5-7 e "'preferred emhodimei the cryptogr; c keys 

ire provided by t t. 2:3 }. K cover, no win c 3ers lisciost a eh 

is oserver to perform 

f(> ■< U "* lli I v. l. 1 i J It \ O S J t 

c ends pi eke t is imp hat the cryptoserver first obtained the ent > eaie e> from 
the client, and stored it for later use (id., 1 2:6 - 8). 

i-ai v^j^ c ivv^iv^ cation with, a 

secure key p o\ a, an u t a..as b\ t a c ^ptomapn e -uaa en»r <* to t ^ „ t, mo n 
e k! > event i 5 te devk e cryptographs ^ n cryptograph! 

>eniee < h s v v e 0 sc hn 

y f uphic operations ia op o 1 is v the crypt 1 

service engine should an, on the data. Berson does not disclose or <ugecs- those features. 
Fherefore Berson doe* , nd ? chum \ c be 

vo. vi i e r s a - 24 depend < , v a 1 1. ' ! contain of k 1 r , v- V >i . u 
v\ 1 t d <,e to 100 [ui.ii a e c e j >^ t ,i n vma 

reasons claim 1 is allowable. 

In addition, regarding claim 21, the Examiner contends Berson 6:44 - 67 discloses 
iairoed element an lia ra do. an.- seen ; 1 ct <. itabar 

and suitable for storing private keys, and a smart card interlace device However, Berson does 

21 tha ec 1 a so nab I y « strued to k 1 3 ^ ' >erso h sepai <s e< • 

no v v t t v o " 1 1 „. v s f < f claim 21 is ypene d 
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,(,< >^^ii J . r ^ a >. : v a - A 24 depend m m cE ,i "*1 end .ee allowable 

tor at least the same reasons. 

Based on the remarks presented above, reconsideration and. withdrawal of the section 102 
rejection of claims 1 - 24 are respectfully requested. 

I 'e > n . 55 <'S< a/flj 

Claims 25 •••• 66 stand rejected under 35 U.S.C. § 103(b) as allegedly being unpatentable 
over Benson. Claims 54 - 59 are canceled, mooting the rejection as to those claims. The 
rejection is mocrsod -a oh c ± 1 o the renuureo:: e Leans is - no pum-mco 

Regarding claim 25, the Examiner admits Beraon < oes 11 v 6 "u,^ „ >^ < 
raring scheme claimed, but contend ave been obvioi id tl eat Berson 

c u u\ 

1 J o s i m v c . s i s el < - e s nulti clients 

interface with a security servers' which suggests that the Examiner does not fully appreciate how 
such a scheme works, because it has nothing to do with supporting multiple clients, but rather 
vitl >rovidi i e the cryptographic ec! i i 1 1 hi 

used even if onh one client were present \ccord ng > the ati male su g< sted In I re Examiner 
for extending Berson is inapposite, arc die reaction of claim 15 should be withdrawn. 

Regarding claims 26 - 66., hie Examiner contends they encompass the same or similar 
scope as claim* I - 3^ t nd <. «. ^ ^ < 5 . • i 

claims 1 -- 25. Ac \ as t disagree, and no t 

comprise fe es i id claims I 25, noi are tl e\ o sC.^e. _o- cd ot er.oewd 

obvious by Berson. For example, claims 65 - 66 depend Com claim 1 and comprise features not 
found in claim 1 or Its other dependents, nor In Berson. Furthermore. Berson does not provide at 
east claimed features p< g to a c < m c - c 

42), Ja\ > j ension i phic ce Pre 

implemented as a DLLs (claim 30), an API exposed via MS-CAPI (claim 31), establishing a set 
of keys en a s v % ke> sen cr : claim 556 determining authorl/onh -n psi\d logics in o =smeaom 

' s ^ su\ v-es Uvii-tvuikkij! i o) - m | lk ^ e h> 

enmnnm- so> vO 1 > i s L ,\i ^ p u \ n \ im ~~ 
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controlling access to keys stored in a cryptographic ke\ sener (claims 4g - 50k a cryptographic 

ancc eomprLs ( I ware security modi id s f e i i , eejchnrt 51), and 
intercepting and encrypting data en route to an application server (claim 53), 

As noted above, independent claims 27, 32, 33, 42, 48, 51 , and 53 comprise features thai 
are ! ii 1 \ I geste ndered obvious by Bers lerefore, i c 103 reje ion 
s 1 ] i f t i n not su d, and shou wrhdrav\n 
Kk ns 26, 43, 44, 52, 54, and 60 have been amended t em 

i eve its lecess t store * 3togi pb v te devio \s d previous 

comieukv >vua . , ,n ' > io\ ^ \ 

Therefore, the section 103 rejection of those claims and their dependents is also not supported, 
and should be withdrawn. 

Sased csp? v ec t re \ I of the .section 103 

rejection of claims 25 - 53 and 60 - 66 are respectfully requested. 
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j 

No >tbcj ro< uers remain in view oft je foreg< ing amendment md remarks \>. plic mis 
respectfully s hmu that the \ ca -■pdcai including dahn 53 3n 1 6, is 
condition for ic<. k u ce of allowance is resp t 

AS i edile prosecuti* 



Respectfully submitted, 
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